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WHAT IS CLAIMED IS: 

1. A method of validating a user for a transaction to .be 
effectuated by using a transaction card, comprising the steps of : 

configuring a biometric profile for said user, said biometric 
profile including a plurality of biometric samples relating to said user; 

associating said biometric profile with an indicium assigned 
to said transaction card; 

biometrically interrogating said user when said transaction 
is attempted by said user; 

monitoring a biometric response generated with respect to 
said user in response to said step of biometrical interrogation; 

determining if said biometric response matches a biometric 
sample in said biometric profile; and 

if so, approving said user for said transaction. 
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1 2. The method of validating a user for a transaction as set forth 

2 in claim 1, wherein at least a portion of said plurality of biometric 

3 samples comprises voice samples generated by said user responsive to a 

4 plurality of questions directed to said user in said configuring step, and 

5 further wherein said step of biometrical interrogation involves querying 

6 said user for a voice response to a randomly selected question of said 

7 plurality of questions. 

1 3 . The method of validating a user for a transaction as set forth 

2 in claim 1, further comprising the steps of: 

3 prompting said user to input said indicium assigned to said 

4 transaction card after determining that said biometric response matches 

5 a biometric sample of said biometric profile; 

6 determining if said indicium is a valid personal 

7 identification number operating as a password associated with said 

8 transaction card; and 

9 denying access to said user for said transaction if said 

10 indicium is not a valid personal identification number associated with 

1 1 said transaction card. 
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1 4. The method of validating a user for a transaction as set forth 

2 in claim 1, further comprising the steps of: 

3 prompting said user to input said indicium assigned to said 

4 transaction card if said biometric response does not match a biometric 

5 sample of said biometric profile; 

6 confirming that said indicium is a valid personal 

7 identification number associated with said transaction card; and 

8 approving said user for said transaction upon said 

9 confirmation. 

1 5 . The method of validating a user for a transaction as set forth 

2 in claim 1, wherein the step of configuring a biometric profile for said 

3 user is effectuated manually. 

1 6. The method of validating a user for a transaction as set forth 

2 in claim 1, wherein the step of configuring a biometric profile for said 

3 user is effectuated automatically. 



1 7. The method of validating a user for a transaction as set forth 

2 in claim 1 , further comprising the step of updating said biometric profile 

3 for said user. 



Page 30 of 38 



PATENT APPLICATION 
DOCKET NO.: 1275-0006 
COS-99-070 

1 8. A method of validating a user for a call to be effectuated 

2 over a Public Switched Telephone Network (PSTN) using a calling card, 

3 comprising the steps of: 

4 configuring a personalized profile for said user, said 

5 personalized profile including a plurality of voice samples elicited from 

6 said user in response to a plurality of personalized questions directed to 

7 said user; 

8 associating said personalized profile with an indicium 

9 assigned to said calling card; 

1 0 determining if a voice verification is needed with respect to 

1 1 said user when said call is attempted by said user; 

12 if so, querying said user for a voice response to a question 

13 that is randomly selected from said plurality of personalized questions; 

14 verifying if said voice response matches a corresponding 

15 voice sample in said voice profile; and 

1 6 if so, approving said user for said call involving said calling 

1 7 card. 
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9. The method of validating a user for a call as set forth in 
claim 8, further comprising the steps of: 

populating at least a portion of said personalized profile 
with a plurality of Dual Tone Multi Frequency (DTMF) sample 
responses elicited from said user in said configuration step; 

prompting said user to input a DTMF response in response 
to said question that is randomly selected from said plurality of 
personalized questions; 

verifying if said DTMF response matches a corresponding 
sample response in said personalized profile; and 

denying access to said user for said call if said DTMF 
response does not match said corresponding sample response in said 
personalized profile. 
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1 10. The method of validating a user for a call as set forth in 

2 claim 8 5 further comprising the steps of: 

3 prompting said user to input said indicium assigned to said 

4 calling card after verifying that said voice response matches a 

5 corresponding voice sample in said voice profile; 

6 determining if said indicium is a valid personal 

7 identification number associated with said calling card; and 

8 denying access to said user for said call if said indicium is 

9 not a valid personal identification number associated with said calling 
10 card. 

1 11. The method of validating a user for a call as set forth in 

2 claim 8, further comprising the steps of: 

3 prompting said user to input said indicium assigned to said 

4 calling card after verifying that said voice response does not match a 

5 corresponding voice sample in said voice profile; 

6 confirming that said indicium is a valid personal 

7 identification number associated with said calling card; and 

8 approving said user for said call upon said confirmation. 
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1 12. A fraud prevention method for use in a transaction-card- 

2 based system having a conventional authentication process, said 

3 comprising the steps of: 

4 determining, by utilizing said conventional authentication 

5 process, if a fraudulent transaction is being attempted in said transaction- 

6 card-based system by a user using a transaction card; 

7 if so, biometrically interrogating said user to obtain a 

8 biometric sample from said user; and 

9 upon obtaining said biometric sample, denying access to 

1 0 said user for said transaction in said transaction-card-based system if said 

1 1 biometric sample does not match an entry stored in a biometric profile 

12 database inherently associated with said transaction card's owner. 

1 13. The fraud prevention method for use in a transaction-card- 

2 based system as set forth in claim 12, wherein said fraudulent transaction 

3 is selected from the group consisting of: placing a calling card call, 

4 accessing personal information data, accessing a bank account, accessing 

5 an Internet account, accessing a credit report, accessing employment 

6 records, and accessing medical records. 
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14. The fraud prevention method for use in a transaction-card- 
based system as set forth in claim 12, wherein said entry inherently 
associated with said transaction card's owner comprises a voiceprint 
associated with said owner. 

15. The fraud prevention method for use in a transaction-card- 
based system as set forth in claim 12, wherein said entry inherently 
associated with said transaction card's owner comprises at least one of 
a fingerprint, retinal scan, palm print, and implanted ID chip associated 
with said owner. 
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16. An access control system for use with a transaction-card- 
based scheme, said system comprising: 

a network operable with a terminal, said terminal for 
interacting with a user in association with a transaction card; 

a controller disposed in the network to query said user when 
said user attempts a transaction using said transaction card; 

a server disposed in the network, said server responding to 
messages from said controller with respect to querying said user; and 

a profile database coupled to said server, said profile 
database having a plurality of biometric samples inherently coupled to 
said user, wherein said biometric samples are associated with an 
indicium assigned to said transaction card such that when said user 
attempts said transaction, said controller queries said user for a response 
thereto and if said response does not match a corresponding entry in said 
profile database, access is denied to said user for said transaction. 

17. The access control system for use with a transaction-card- 
based scheme as set forth in claim 16, wherein said entry inherently 
coupled to said user comprises at least one of a fingerprint, retinal scan, 
palm print, and implanted ID chip associated with said user. 
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18. The access control system for use with a transaction-card- 
based scheme as set forth in claim 16, wherein said entry inherently 
coupled to said user comprises a voiceprint associated with said user. 

19. The access control system for use with a transaction-card- 
based scheme as set forth in claim 16, wherein said controller comprises 
an Automated Response Unit associated with a Public Switched 
Telephone Network. 

20. The access control system for use with a transaction-card- 
based scheme as set forth in claim 16, wherein said terminal comprises 
a wireline phone. 

21 . The access control system for use with a transaction-card- 
based scheme as set forth in claim 16, wherein said terminal comprises 
an Internet phone. 

22. The access control system for use with a transaction-card- 
based scheme as set forth in claim 1 6, wherein said terminal comprises 
a wireless medium device. 
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